hayd
Re:PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
on Wednesday October 21, 2026 @06:10PM (#50188368)
My understanding is the embargo was scheduled to end 14:00 UTC today, broken 07:41 UTC by Chainguard... It's now 22:00 UTC and AWS are talking about (some time) tomorrow.
Re:PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
on Wednesday October 21, 2026 @05:57PM (#50188225)
Update: After posting this Amazon security released a bulletin to say we should see the updates _some time tomorrow_.
https://aws.amazon.com/security/security-bulletins/2026-143-...
Scant messaging throughout the day. I don't understand why AWS, seemingly, didn't have prior knowledge of this/have it ready very soon after the CVE announcement.
Re:PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
on Wednesday October 21, 2026 @05:43PM (#50188100)
https://explore.alas.aws.amazon.com/CVE-2026-109618.html
https://explore.alas.aws.amazon.com/CVE-2026-109619.html
Both are labelled Important, not Critical.
Re:PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
on Wednesday October 21, 2026 @05:14PM (#50187722)
We didn't get much information throughout the day, besides these comments by an AWS employee/Amazon Linux maintainer on this thread: https://github.com/amazonlinux/amazon-linux-2023/issues/1148...
He referenced an nginx Important CVE taking 20 days to be patched - after it was noted that these PHP CVEs were also labelled by AWS as Important (not Critical). This employee took issue to another user's comment describing 20 days as "nearly a month".
Amazon Linux users/AWS customers barely got any tangible information from the CVE publication at 14:00UTC until this bulletin was posted at 21:30UTC. Very disappointing.
Re:The Rape Gang Inquiry Report [pdf]
on Thursday June 18, 2026 @06:11AM (#48583226)
After public outcry, a national inquiry was promised to the British people last year by their [pro-immigration] Prime Minister... but, of course, this process has still not even begun.
The facts of the independent rape gang inquiry must be faced head on, not ignored because we find the person who instantiated it uncouth. The state has repeatedly refused to make good on its promises of an inquiry, it is a disgusting and inhumane injustice to the past (and future) vicitims.
The facts are horrific and shameful.
Re:Bun Rust rewrite: "codebase fails basic miri checks, allows for UB ...
on Friday May 15, 2026 @03:30PM (#48152805)
I suspect they've been planning this and experimenting for many months. Along with the large existing test suite, they have lots of tooling for parallelizing agents and an unlimited token budget. So don't feel too bad..
Re:Rars: a Rust RAR implementation, mostly written by LLMs
on Wednesday May 13, 2026 @06:11PM (#48128281)
https://law.stackexchange.com/a/83552
I suppose the question is whether the author had ever entered into a contract limiting reverse engineering...
Re:Google Plans to Invest Up to $40B in Anthropic
on Friday April 24, 2026 @05:56PM (#47896304)
"$30B in sales and $1B in profit."
This margin seems terrible.
Re:Claude Opus 4.7
on Thursday April 16, 2026 @02:34PM (#47797578)
Does it? I'm not sure I'd necessarily notice but I haven't found it noticeably worse.
Re:Claude Opus 4.7
on Thursday April 16, 2026 @11:33AM (#47794806)
me feel that it needs some tweaking - it's a little annoyingly cute (and could be even terser).
Re:Claude Code Routines
on Tuesday April 14, 2026 @05:17PM (#47771644)
same. I use pi - and anthropic pricing change have made it usuable with Max. Codex works pretty much the same, not need to change development practice... apart from no 429s (so far).
Re:Reallocating $100/Month Claude Code Spend to Zed and OpenRouter
on Thursday April 09, 2026 @11:51AM (#47705289)
had been using claude max/opus with pi and the results have been incredible. Having pi write an AGENTS.md and dip your feet into creating your own skills specific to the project.
With the anthropic billing change (not being able to use the max credits for pi) I think I have to cancel - as I'm whirring through credits now.
Going to move to the $250/mo OpenAI codex plan for now.
Re:xAI joins SpaceX
on Monday February 02, 2026 @07:01PM (#46864210)
I think people are more concerned about SpaceX getting the raw deal here.
Re:Vibe Coding Kills Open Source
on Monday January 26, 2026 @09:15AM (#46765869)
I think one of the things that will need to be embraced is carefully curating .md context files to give the prompts better/shared direction to contributors. Things like any new feature or fix should include a test case (in the right place), functions should re-use existing library code wherever possible, function signatures should never change in a backwards-incompatible way, any code changes should pass the linter, etc etc. And ideally ensure the agent writes code that's going to be to the maintainer's "taste".
I haven't worked out how to do this for my own projects.
Once you've set it up it's not too hard to imagine an AI giving an initial PR assessment... to discard the worst AI slop, offer some stylistic feedback, or suggest performance concerns.
Re:Douglas Adams on the English–American cultural divide over "heroes"
on Friday January 23, 2026 @04:25AM (#46730353)
> the European Union was seen to be a good thing in the eyes of the archetypal Brit
It wasn't, hence Brexit. We were dragged in via a Customs Union against the will of the British electorate at every turn.
Re:San Francisco to offer free childcare to people making up to $230000
on Friday January 16, 2026 @03:48AM (#46644438)
The £100k threshold is such an economically illiterate policy for society. The GPs and lawyers I know are working ~3 days a week to avoid it, so much economic output and taxes missed out on.
Re:San Francisco to offer free childcare to people making up to $230000
on Friday January 16, 2026 @03:41AM (#46644386)
and most don't live in the neighbourhood, city or even state (in tech anyways).
Re:Find a pub that needs you
on Thursday January 15, 2026 @08:01AM (#46631817)
> This is great for HMRC because it collects 10 times more than what the publican does
WTF.
Re:High-Performance DBMSs with io_uring: When and How to use it
on Tuesday January 06, 2026 @06:26PM (#46520352)
Is this something likely to ever change?
Re:String Theory Inspires a Brilliant, Baffling New Math Proof
on Saturday December 13, 2025 @04:28PM (#46258248)
I'm reminded of a graduate course in Elliptical Curves where, late in the semester, we took a lecture to speedrun all the prerequisites and ideas of Perelman's [then new] proof of the Poincaré conjecture. It was wild but a lot of fun.
Re:UK House of Lords attempting to ban use of VPNs by anyone under 16
on Thursday December 11, 2025 @07:30PM (#46239385)
the process is the punishment
Re:Norway reviews cybersecurity after remote-access feature found in C...
on Wednesday November 05, 2025 @04:25PM (#45828249)
Or outcompete because it's state-funded, and can inject things like remote access (that the state might like the option to use one day).
It's really confusing that the EU don't consider this "dumping". I thought that was this big thing that they cared about.
Re:Poker Tournament for LLMs
on Tuesday October 28, 2025 @06:56PM (#45740396)
The being table open for the entire time with 100bb minimum and no maximum.. is going to lead to some wild swings at the top.
Re:Poker Tournament for LLMs
on Tuesday October 28, 2025 @06:52PM (#45740341)
and the board isn't dry (there are straight and flush draws).
Re:Imgur pulls out of UK as data watchdog threatens fine
on Tuesday September 30, 2025 @10:03AM (#45425589)
"make money in the UK"
an oxymoron.
Re:All British adults to require a digital ID 'Brit Card'
on Friday September 26, 2025 @04:27PM (#45390692)
> I would vote against it given the chance.
Unfortunately the British people are rarely given a chance to vote and even more rarely listened to.
Re:GPT-5-Codex
on Tuesday September 16, 2025 @03:21PM (#45266680)
The question is which version of node, not npm.
Re:UK Technology Secretary: Online Safety Act opponents are on the pre...
on Tuesday July 29, 2025 @11:59AM (#44724979)
A General Election cannot come soon enough.
Re:H1-B visas hurt one type of worker and exploit another
on Saturday June 28, 2025 @04:55PM (#44408122)
L1 is another option.